VulnerabilityModified

CVE-2019-7092

ColdFusion versions Update 1 and earlier, Update 7 and earlier, and Update 15 and earlier have a cross site scripting vulnerability.

MEDIUM 6.1EPSS 2.39%

Does this matter?

Lower severity and a low EPSS score (2.39%). Track it; it rarely justifies an emergency change on its own.

Description

ColdFusion versions Update 1 and earlier, Update 7 and earlier, and Update 15 and earlier have a cross site scripting vulnerability. Successful exploitation could lead to information disclosure .

CVSS 3.0: 6.1 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS: 2.39% probability · 83th percentile
CISA KEV: Not listed
Weakness: CWE-79
Affected: adobe/coldfusion
Source: psirt@adobe.com

References

https://helpx.adobe.com/security/products/coldfusion/apsb19-10.htmlVendor Advisory
https://helpx.adobe.com/security/products/coldfusion/apsb19-10.htmlVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.